RubyGems - doorkeeper-grants_assertion - Versions diffs - 0.1.0 → 0.2.0 - Mend

doorkeeper-grants_assertion 0.1.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (64) hide show

checksums.yaml +4 -4
data/.gitignore +3 -0
data/.travis.yml +1 -6
data/Gemfile +6 -9
data/README.md +71 -2
data/Rakefile +8 -6
data/doorkeeper-grants_assertion.gemspec +27 -8
data/gemfiles/rails_4_2.gemfile +0 -3
data/gemfiles/rails_4_2.gemfile.lock +68 -17
data/gemfiles/rails_5_0.gemfile +0 -3
data/gemfiles/rails_5_0.gemfile.lock +68 -17
data/gemfiles/rails_latest_and_doorkeeper_latest.gemfile +0 -3
data/gemfiles/rails_latest_and_doorkeeper_latest.gemfile.lock +68 -17
data/lib/doorkeeper/grants_assertion.rb +5 -0
data/lib/doorkeeper/grants_assertion/devise/omniauth.rb +33 -0
data/lib/doorkeeper/grants_assertion/omniauth.rb +35 -0
data/lib/doorkeeper/grants_assertion/railtie.rb +6 -0
data/lib/doorkeeper/grants_assertion/version.rb +7 -0
data/lib/doorkeeper/request/assertion.rb +2 -0
metadata +115 -58
data/spec/dummy/Rakefile +0 -7
data/spec/dummy/app/controllers/application_controller.rb +0 -3
data/spec/dummy/app/controllers/custom_authorizations_controller.rb +0 -7
data/spec/dummy/app/controllers/full_protected_resources_controller.rb +0 -11
data/spec/dummy/app/controllers/home_controller.rb +0 -17
data/spec/dummy/app/controllers/metal_controller.rb +0 -11
data/spec/dummy/app/controllers/semi_protected_resources_controller.rb +0 -11
data/spec/dummy/app/helpers/application_helper.rb +0 -5
data/spec/dummy/app/models/user.rb +0 -9
data/spec/dummy/app/views/home/index.html.erb +0 -0
data/spec/dummy/app/views/layouts/application.html.erb +0 -14
data/spec/dummy/config.ru +0 -4
data/spec/dummy/config/application.rb +0 -47
data/spec/dummy/config/boot.rb +0 -4
data/spec/dummy/config/database.yml +0 -15
data/spec/dummy/config/environment.rb +0 -5
data/spec/dummy/config/environments/development.rb +0 -29
data/spec/dummy/config/environments/production.rb +0 -62
data/spec/dummy/config/environments/test.rb +0 -53
data/spec/dummy/config/initializers/backtrace_silencers.rb +0 -7
data/spec/dummy/config/initializers/doorkeeper.rb +0 -92
data/spec/dummy/config/initializers/secret_token.rb +0 -9
data/spec/dummy/config/initializers/session_store.rb +0 -8
data/spec/dummy/config/initializers/wrap_parameters.rb +0 -14
data/spec/dummy/config/locales/doorkeeper.en.yml +0 -74
data/spec/dummy/config/routes.rb +0 -52
data/spec/dummy/db/migrate/20111122132257_create_users.rb +0 -10
data/spec/dummy/db/migrate/20130902165751_create_doorkeeper_tables.rb +0 -41
data/spec/dummy/db/migrate/20130902175349_add_owner_to_application.rb +0 -7
data/spec/dummy/db/schema.rb +0 -66
data/spec/dummy/script/rails +0 -6
data/spec/factories/access_grant.rb +0 -9
data/spec/factories/access_token.rb +0 -11
data/spec/factories/application.rb +0 -6
data/spec/requests/flows/assertion_spec.rb +0 -127
data/spec/spec_helper.rb +0 -2
data/spec/spec_helper_integration.rb +0 -28
data/spec/support/dependencies/factory_girl.rb +0 -2
data/spec/support/helpers/config_helper.rb +0 -9
data/spec/support/helpers/model_helper.rb +0 -45
data/spec/support/helpers/request_spec_helper.rb +0 -76
data/spec/support/helpers/url_helper.rb +0 -19
data/spec/support/shared/controllers_shared_context.rb +0 -60
data/spec/support/shared/models_shared_examples.rb +0 -52

data/spec/dummy/Rakefile DELETED

@@ -1,7 +0,0 @@
-#!/usr/bin/env rake
-# Add your own tasks in files placed in lib/tasks ending in .rake,
-# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
-require File.expand_path('../config/application', __FILE__)
-Dummy::Application.load_tasks

data/spec/dummy/app/controllers/application_controller.rb DELETED

@@ -1,3 +0,0 @@
-class ApplicationController < ActionController::Base
-  protect_from_forgery
-end

data/spec/dummy/app/controllers/custom_authorizations_controller.rb DELETED

@@ -1,7 +0,0 @@
-class CustomAuthorizationsController < ::ApplicationController
-  %w(index show new create edit update destroy).each do |action|
-    define_method action do
-      render nothing: true
-    end
-  end
-end

data/spec/dummy/app/controllers/full_protected_resources_controller.rb DELETED

@@ -1,11 +0,0 @@
-class FullProtectedResourcesController < ApplicationController
-  before_action :doorkeeper_authorize!
-  def index
-    render text: 'index'
-  end
-  def show
-    render text: 'show'
-  end
-end

data/spec/dummy/app/controllers/home_controller.rb DELETED

@@ -1,17 +0,0 @@
-class HomeController < ApplicationController
-  def index
-  end
-  def sign_in
-    session[:user_id] = if Rails.env.development?
-                          User.first || User.create!(name: 'Joe', password: 'sekret')
-                        else
-                          User.first
-                        end
-    redirect_to '/'
-  end
-  def callback
-    render text: 'ok'
-  end
-end

data/spec/dummy/app/controllers/metal_controller.rb DELETED

@@ -1,11 +0,0 @@
-class MetalController < ActionController::Metal
-  include AbstractController::Callbacks
-  include ActionController::Head
-  include Doorkeeper::Helpers::Controller
-  before_action :doorkeeper_authorize!
-  def index
-    self.response_body = { ok: true }.to_json
-  end
-end

data/spec/dummy/app/controllers/semi_protected_resources_controller.rb DELETED

@@ -1,11 +0,0 @@
-class SemiProtectedResourcesController < ApplicationController
-  before_action :doorkeeper_authorize!, only: [:index]
-  def index
-    render text: 'protected index'
-  end
-  def show
-    render text: 'protected show'
-  end
-end

data/spec/dummy/app/helpers/application_helper.rb DELETED

@@ -1,5 +0,0 @@
-module ApplicationHelper
-  def current_user
-    @current_user ||= User.find_by_id(session[:user_id])
-  end
-end

data/spec/dummy/app/models/user.rb DELETED

@@ -1,9 +0,0 @@
-class User < ActiveRecord::Base
-  if ::Rails.version.to_i < 4
-    attr_accessible :name, :password, :assertion
-  end
-  def self.authenticate!(name, password)
-    User.where(name: name, password: password).first
-  end
-end

data/spec/dummy/app/views/home/index.html.erb DELETED

File without changes

data/spec/dummy/app/views/layouts/application.html.erb DELETED

@@ -1,14 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>Dummy</title>
-  <%= csrf_meta_tags %>
-</head>
-<body>
-<%= link_to "Sign in", '/sign_in' %>
-<%= yield %>
-</body>
-</html>

data/spec/dummy/config.ru DELETED

@@ -1,4 +0,0 @@
-# This file is used by Rack-based servers to start the application.
-require ::File.expand_path('../config/environment',  __FILE__)
-run Dummy::Application

data/spec/dummy/config/application.rb DELETED

@@ -1,47 +0,0 @@
-require File.expand_path('../boot', __FILE__)
-require 'action_controller/railtie'
-require 'sprockets/railtie'
-Bundler.require :default
-require "active_record/railtie"
-module Dummy
-  class Application < Rails::Application
-    # Settings in config/environments/* take precedence over those specified here.
-    # Application configuration should go into files in config/initializers
-    # -- all .rb files in that directory are automatically loaded.
-    # Only load the plugins named here, in the order given (default is alphabetical).
-    # :all can be used as a placeholder for all plugins not explicitly named.
-    # config.plugins = [ :exception_notification, :ssl_requirement, :all ]
-    # Activate observers that should always be running.
-    # config.active_record.observers = :cacher, :garbage_collector, :forum_observer
-    if defined?(ActiveRecord) && Rails.version.to_i < 4
-      config.active_record.whitelist_attributes = true
-    end
-    # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
-    # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
-    # config.time_zone = 'Central Time (US & Canada)'
-    # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
-    config.i18n.load_path += Dir[Rails.root.join('../../', 'config/locales', '*.{rb,yml}').to_s]
-    # config.i18n.default_locale = :en
-    # Configure the default encoding used in templates for Ruby 1.9.
-    config.encoding = 'utf-8'
-    # Configure sensitive parameters which will be filtered from the log file.
-    config.filter_parameters += [:password]
-    # Enable the asset pipeline
-    config.assets.enabled = true
-    # Version of your assets, change this if you want to expire all your assets
-    config.assets.version = '1.0'
-  end
-end

data/spec/dummy/config/boot.rb DELETED

@@ -1,4 +0,0 @@
-require 'rubygems'
-require 'bundler/setup'
-$LOAD_PATH.unshift File.expand_path('../../../../lib', __FILE__)

data/spec/dummy/config/database.yml DELETED

@@ -1,15 +0,0 @@
-development:
-  adapter: sqlite3
-  database: db/development.sqlite3
-  pool: 5
-  timeout: 5000
-test:
-  adapter: sqlite3
-  database: ":memory:"
-  timeout: 500
-production:
-  adapter: sqlite3
-  database: ":memory:"
-  timeout: 500

data/spec/dummy/config/environment.rb DELETED

@@ -1,5 +0,0 @@
-# Load the rails application
-require File.expand_path('../application', __FILE__)
-# Initialize the rails application
-Dummy::Application.initialize!

data/spec/dummy/config/environments/development.rb DELETED

@@ -1,29 +0,0 @@
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # In the development environment your application's code is reloaded on
-  # every request.  This slows down response time but is perfect for development
-  # since you don't have to restart the web server when you make code changes.
-  config.cache_classes = false
-  # Show full error reports and disable caching
-  config.consider_all_requests_local       = true
-  config.action_controller.perform_caching = false
-  # Don't care if the mailer can't send
-  # config.action_mailer.raise_delivery_errors = false
-  # Print deprecation notices to the Rails logger
-  config.active_support.deprecation = :log
-  # Only use best-standards-support built into browsers
-  config.action_dispatch.best_standards_support = :builtin
-  # Do not compress assets
-  config.assets.compress = false
-  # Expands the lines which load the assets
-  config.assets.debug = true
-  config.eager_load = false
-end

data/spec/dummy/config/environments/production.rb DELETED

@@ -1,62 +0,0 @@
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # Code is not reloaded between requests
-  config.cache_classes = true
-  # Full error reports are disabled and caching is turned on
-  config.consider_all_requests_local       = false
-  config.action_controller.perform_caching = true
-  # Disable Rails's static asset server (Apache or nginx will already do this)
-  config.serve_static_assets = false
-  # Compress JavaScripts and CSS
-  config.assets.compress = true
-  # Don't fallback to assets pipeline if a precompiled asset is missed
-  config.assets.compile = false
-  # Generate digests for assets URLs
-  config.assets.digest = true
-  # Defaults to Rails.root.join("public/assets")
-  # config.assets.manifest = YOUR_PATH
-  # Specifies the header that your server uses for sending files
-  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
-  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
-  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
-  # See everything in the log (default is :info)
-  # config.log_level = :debug
-  # Use a different logger for distributed setups
-  # config.logger = SyslogLogger.new
-  # Use a different cache store in production
-  # config.cache_store = :mem_cache_store
-  # Enable serving of images, stylesheets, and JavaScripts from an asset server
-  # config.action_controller.asset_host = "http://assets.example.com"
-  # Precompile additional assets (application.js, application.css, and all non-JS/CSS are already added)
-  # config.assets.precompile += %w( search.js )
-  # Disable delivery errors, bad email addresses will be ignored
-  # config.action_mailer.raise_delivery_errors = false
-  # Enable threaded mode
-  # config.threadsafe!
-  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
-  # the I18n.default_locale when a translation can not be found)
-  config.i18n.fallbacks = true
-  # Send deprecation notices to registered listeners
-  config.active_support.deprecation = :notify
-  config.eager_load = true
-end

data/spec/dummy/config/environments/test.rb DELETED

@@ -1,53 +0,0 @@
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # The test environment is used exclusively to run your application's
-  # test suite.  You never need to work with it otherwise.  Remember that
-  # your test database is "scratch space" for the test suite and is wiped
-  # and recreated between test runs.  Don't rely on the data there!
-  config.cache_classes = true
-  if Rails.version.to_i < 5
-    # Configure static asset server for tests with Cache-Control for performance
-    config.serve_static_files = true
-    config.static_cache_control = 'public, max-age=3600'
-  end
-  if Rails.version.to_i < 4
-    # Log error messages when you accidentally call methods on nil
-    config.whiny_nils = true
-  end
-  if Rails.version.to_i >= 4
-    # Do not eager load code on boot. This avoids loading your whole application
-    # just for the purpose of running a single test. If you are using a tool that
-    # preloads Rails for running tests, you may have to set it to true.
-    config.eager_load = false
-    config.i18n.enforce_available_locales = true
-  end
-  # Show full error reports and disable caching
-  config.consider_all_requests_local       = true
-  config.action_controller.perform_caching = false
-  # Raise exceptions instead of rendering exception templates
-  config.action_dispatch.show_exceptions = false
-  # Disable request forgery protection in test environment
-  config.action_controller.allow_forgery_protection    = false
-  # Tell Action Mailer not to deliver emails to the real world.
-  # The :test delivery method accumulates sent emails in the
-  # ActionMailer::Base.deliveries array.
-  # config.action_mailer.delivery_method = :test
-  # Use SQL instead of Active Record's schema dumper when creating the test database.
-  # This is necessary if your schema can't be completely dumped by the schema dumper,
-  # like if you have constraints or database-specific column types
-  # config.active_record.schema_format = :sql
-  # Print deprecation notices to the stderr
-  config.active_support.deprecation = :stderr
-  config.eager_load = true
-end

data/spec/dummy/config/initializers/backtrace_silencers.rb DELETED

@@ -1,7 +0,0 @@
-# Be sure to restart your server when you modify this file.
-# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
-# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
-# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
-# Rails.backtrace_cleaner.remove_silencers!

data/spec/dummy/config/initializers/doorkeeper.rb DELETED

@@ -1,92 +0,0 @@
-Doorkeeper.configure do
-  # Change the ORM that doorkeeper will use.
-  # Currently supported options are :active_record, :mongoid2, :mongoid3, :mongo_mapper
-  orm :active_record
-  # This block will be called to check whether the resource owner is authenticated or not.
-  resource_owner_authenticator do
-    # Put your resource owner authentication logic here.
-    # Example implementation:
-    #   User.find_by_id(session[:user_id]) || redirect_to(new_user_session_url)
-    User.find_by_id(session[:user_id]) || redirect_to(root_url, alert: 'Needs sign in.')
-  end
-  # If you want to restrict access to the web interface for adding oauth authorized applications, you need to declare the block below.
-  # admin_authenticator do
-  #   # Put your admin authentication logic here.
-  #   # Example implementation:
-  #   Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
-  # end
-  # Authorization Code expiration time (default 10 minutes).
-  # authorization_code_expires_in 10.minutes
-  # Access token expiration time (default 2 hours).
-  # If you want to disable expiration, set this to nil.
-  # access_token_expires_in 2.hours
-  # Reuse access token for the same resource owner within an application (disabled by default)
-  # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
-  # reuse_access_token
-  # Issue access tokens with refresh token (disabled by default)
-  # use_refresh_token
-  # Provide support for an owner to be assigned to each registered application (disabled by default)
-  # Optional parameter :confirmation => true (default false) if you want to enforce ownership of
-  # a registered application
-  # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
-  # enable_application_owner :confirmation => false
-  # Define access token scopes for your provider
-  # For more information go to
-  # https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
-  # default_scopes  :public
-  # optional_scopes :write, :update
-  # Change the way client credentials are retrieved from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:client_id` and `:client_secret` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # client_credentials :from_basic, :from_params
-  # Change the way access token is authenticated from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:access_token` or `:bearer_token` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
-  # Change the test redirect uri for client apps
-  # When clients register with the following redirect uri, they won't be redirected to any server and the authorization code will be displayed within the provider
-  # The value can be any string. Use nil to disable this feature. When disabled, clients must provide a valid URL
-  # (Similar behaviour: https://developers.google.com/accounts/docs/OAuth2InstalledApp#choosingredirecturi)
-  #
-  # test_redirect_uri 'urn:ietf:wg:oauth:2.0:oob'
-  # Specify what grant flows are enabled in array of Strings. The valid
-  # strings and the flows they enable are:
-  #
-  # "authorization_code" => Authorization Code Grant Flow
-  # "implicit"           => Implicit Grant Flow
-  # "password"           => Resource Owner Password Credentials Grant Flow
-  # "client_credentials" => Client Credentials Grant Flow
-  #
-  # If not specified, Doorkeeper enables all the four grant flows.
-  #
-  grant_flows %w(authorization_code implicit password client_credentials assertion)
-  # Under some circumstances you might want to have applications auto-approved,
-  # so that the user skips the authorization step.
-  # For example if dealing with trusted a application.
-  # skip_authorization do |resource_owner, client|
-  #   client.superapp? or resource_owner.admin?
-  # end
-  # WWW-Authenticate Realm (default "Doorkeeper").
-  # realm "Doorkeeper"
-  # Allow dynamic query parameters (disabled by default)
-  # Some applications require dynamic query parameters on their request_uri
-  # set to true if you want this to be allowed
-  # wildcard_redirect_uri false
-end